WP Hotel Booking, 0256a4cb-5d29-44bb-bc69-45edd8484c9d
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- WP Hotel Booking [wp-hotel-booking] < 2.0.1 WP Hotel Booking <= 1.10.5 - Unauthenticated Arbitrary Settings Update The plugin does not have authorisation and CSRF checsk in place when updating its settings, which could allow unauthenticated attackers to change them
- Affected versions
-
max 2.0.1.
- Status
-
vulnerable